GLPI Unauthorized Form Structure Export Vulnerability

A vulnerability allowing unauthorized export of form structures has been identified in GLPI versions 11.0.0 through 11.0.6. This issue arises when an authenticated user with forms READ permission can export the structure of forms they are not authorized to access.

Impact

Exploitation of this vulnerability allows for unauthorized access to the structure of restricted forms, which could lead to information disclosure or manipulation of form-related data.

Remediation

Users are advised to upgrade to GLPI version 11.0.7, where this vulnerability has been patched.